Application Security Engineer

Bristol - 3 days a week on site

£90,000 + great benefits

An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.

Application Security Engineer – Your Background

The ideal Application Security Engineer will have:

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
• Relevant professional certifications for example:
  • CISSP
  • SANS
  • Crest/CHECK
• Strong understanding of shift left
• Proven experience with of working with development teams on security related topics
• Either hands on secure software development or applications security testing
• Likely come from a pen testing, SRE, or Software Development Background

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

Duties and Responsibilities

The successful Application Security Engineer will:

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repo's
• Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and pen testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both a verbal and written format
• Lead delivery of hands-on security engineering solutions when needed

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.